$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: apFrn7FMhRCsMnhWB+jhotFBg6nP9nLE3RkSLGkOTe8= Subject key identifier: B1:6D:A5:F2:F8:F5:7D:14:73:EA:22:A3:BF:25:B2:E4:80:15:15:93 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 54D3DB9F3C2E3E1A868D66CA849BDDFDE32CB389 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 05:26:39 +0000 Manifest this update: Tue 02 Jun 2026 05:21:39 +0000 Manifest next update: Wed 03 Jun 2026 08:44:39 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) 4: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: Y808KVMf9jIkj/hvcYmEdRZG+L56wfN+LXR+oU1uRL8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 08:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d3:db:9f:3c:2e:3e:1a:86:8d:66:ca:84:9b:dd:fd:e3:2c:b3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Jun 2 05:21:39 2026 GMT Not After : Jun 3 08:44:39 2026 GMT Subject: CN=B16DA5F2F8F57D1473EA22A3BF25B2E480151593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:d5:6d:fe:99:d6:8f:65:7d:cf:92:9e:af: f2:1e:a3:85:36:28:16:8a:ef:6a:b1:c6:2d:ad:15: 6a:e0:1f:0d:74:e3:db:db:16:4c:89:79:e0:8b:02: 08:15:b9:83:21:03:b5:a0:20:e1:d4:63:f9:42:28: d9:8a:a4:81:9a:b1:92:a6:1d:d7:3b:b2:1e:a4:e2: 29:de:8b:6a:32:d7:7d:89:73:e2:60:07:22:77:75: 25:bc:9e:8c:5d:d7:5c:47:93:ff:c2:b9:52:b5:d3: f6:73:a5:6c:28:8a:11:80:f9:07:ea:a3:c1:b1:94: a9:9e:42:36:a9:d7:92:24:30:92:be:4d:c1:c0:39: 13:4e:91:9e:45:27:67:27:0f:49:da:69:3b:04:dd: a8:a9:41:eb:b2:85:07:ef:9f:c7:bc:2e:fa:b2:33: 43:80:6a:53:19:40:43:44:59:4c:1b:dd:95:1a:f0: db:60:fd:e6:0f:a9:a1:c7:9e:e7:07:6a:26:36:d6: 15:75:c7:4b:7f:ef:f2:a0:d6:86:5d:52:1e:03:39: ed:1e:9a:f7:39:4e:0c:46:e1:ae:a7:c9:f0:49:9c: c2:0e:72:ce:b4:2e:d0:4e:9b:c1:33:62:6f:10:ea: 1e:bd:72:43:d3:c2:7a:d9:67:71:95:d1:de:be:d7: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:A5:F2:F8:F5:7D:14:73:EA:22:A3:BF:25:B2:E4:80:15:15:93 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:68:55:51:29:89:b7:37:8d:fd:a8:18:72:62:ad:a7:14:84: a5:8f:c7:51:fd:75:ec:c0:bb:c4:eb:f5:3a:e4:b4:55:43:1e: 1d:fe:97:62:dc:b6:15:fc:61:42:8e:3f:40:74:10:f6:cd:56: b9:f6:64:6e:37:f9:eb:83:3b:da:38:5f:87:bd:05:2a:6d:25: ed:60:b6:f5:1c:22:e5:3f:32:18:1e:60:99:98:b5:fb:48:f6: 3f:dc:e5:bd:32:82:9c:e3:74:d3:ae:ee:bf:ce:fa:4e:ca:d7: a4:b5:9c:b9:76:84:be:78:58:ad:23:92:6f:3d:73:92:1d:e0: e4:10:2e:09:5b:fc:61:85:d6:ec:c8:aa:af:92:e8:de:22:76: e6:75:35:f8:79:14:15:3e:2c:b7:6c:e6:a7:ad:16:08:83:52: be:46:45:2f:6a:fc:3c:55:d4:58:c6:7a:43:45:82:bf:33:8b: b2:72:9c:0e:7f:3d:ea:14:89:52:9a:ee:76:bb:38:0b:58:2c: ad:69:6f:a9:66:52:71:e2:df:74:43:6c:de:52:64:93:59:b5: a1:69:3a:7d:c2:91:98:3a:cb:77:a1:d2:69:b5:80:e8:3b:0c: ee:4b:29:9e:35:f4:4a:53:07:dd:60:01:c7:75:e6:29:f0:ff: bd:ce:c7:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNPbnzwuPhqGjWbKhJvd/eMss4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA2MDIwNTIxMzlaFw0yNjA2MDMwODQ0MzlaMDMxMTAvBgNV BAMTKEIxNkRBNUYyRjhGNTdEMTQ3M0VBMjJBM0JGMjVCMkU0ODAxNTE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt09Vt/pnWj2V9z5Ker/Ieo4U2 KBaK72qxxi2tFWrgHw1049vbFkyJeeCLAggVuYMhA7WgIOHUY/lCKNmKpIGasZKm Hdc7sh6k4inei2oy132Jc+JgByJ3dSW8noxd11xHk//CuVK10/ZzpWwoihGA+Qfq o8GxlKmeQjap15IkMJK+TcHAORNOkZ5FJ2cnD0naaTsE3aipQeuyhQfvn8e8Lvqy M0OAalMZQENEWUwb3ZUa8Ntg/eYPqaHHnucHaiY21hV1x0t/7/Kg1oZdUh4DOe0e mvc5TgxG4a6nyfBJnMIOcs60LtBOm8EzYm8Q6h69ckPTwnrZZ3GV0d6+1003AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsW2l8vj1fRRz6iKjvyWy5IAVFZMwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxoVVEpibc3jf2oGHJiracUhKWPx1H9dezA u8Tr9TrktFVDHh3+l2LcthX8YUKOP0B0EPbNVrn2ZG43+euDO9o4X4e9BSptJe1g tvUcIuU/MhgeYJmYtftI9j/c5b0ygpzjdNOu7r/O+k7K16S1nLl2hL54WK0jkm89 c5Id4OQQLglb/GGF1uzIqq+S6N4iduZ1Nfh5FBU+LLds5qetFgiDUr5GRS9q/DxV 1FjGekNFgr8zi7JynA5/PeoUiVKa7na7OAtYLK1pb6lmUnHi33RDbN5SZJNZtaFp On3CkZg6y3eh0mm1gOg7DO5LKZ419EpTB91gAcd15inw/73Ox+g= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:14 2026 by rpki-client